Permissionship.Unspecified is the zero-value in protobuf, so we intentionally surface it as that so it can be distinct from not actually having permission.